Draft. This page is not final and is not yet in effect.
Privacy policy
Last updated: 10 October 2026
This policy explains what personal data the Majlis app collects, why we collect it, who we share it with, how long we keep it, and the choices you have. It applies to the Majlis Android app and this website.
Majlis is run by Mohamed Aslam (“we”, “us”). We decide how your data is used. Contact us at support@majlis.community.
The data we collect
Your account
- Name and email address, when you sign up.
- Password, if you sign up with email. We store only a secure hash, never the password itself.
- Google account ID and profile photo, if you sign in with Google. We use the photo as your default profile picture.
- Profile photo, if you upload one.
- When you accepted these terms, and which version.
Scholars and organisers
If you apply to be a scholar or an organiser, we also collect what you put in the application: your public name, bio or description, a short tag, city, photo and phone number. Your profile (everything except the phone number) is shown to other users once a moderator approves it. Your phone number is only shown to you and to our moderators.
Location
- Finding events. To show events near you, the app sends a location to our server: either your device’s location (if you allow it) or a city you pick from a list. We use it to find events within 100 km. We don’t save it, and our server logs don’t record it.
- Publishing an event. If you host an event, its venue location is stored and shown to everyone, with the venue name and address.
You can refuse location access and pick a city instead.
What you do in the app
- Events you book, save or publish, and the scholars you follow.
- Questions you ask and answers you give. Public questions and their answers can be read by other users, without your name. Private questions are only seen by you, the scholar you asked and our moderators.
- When you tap “I’m interested” on a scholar’s courses or counselling, and any note you add.
- Reports you make about an event, question, answer or profile: what you reported, the reason and any note you add. Only our moderators see who made a report.
- People you block. Blocking is private: the person you block is not told.
- Your notifications and your notification settings.
Your device
- A push notification token, so we can send notifications to your phone.
- Basic technical data our servers record with each request, such as your IP address and the time.
We do not use advertising, analytics or crash-reporting tools, and we do not sell your data.
Why we use it
| Purpose | Data |
|---|---|
| Create your account and sign you in | name, email, password hash, Google account ID |
| Show events near you | location you send with a search |
| Let you book, save and follow | bookings, saves, follows |
| Run Q&A between users and scholars | questions, answers |
| Show scholar and organiser profiles and events | profile details, photos, event details |
| Let moderators review applications and questions | applications, phone number, questions |
| Act on reports and keep blocked content out of your view | reports, blocks |
| Send notifications | push token, notification settings |
| Keep the service secure and fix problems | request logs |
We use your data only for running Majlis. We process it on the basis of your consent, which you give by creating an account and using the features above. You can withdraw consent at any time by deleting your account.
Who we share it with
We share data only with the service providers that run Majlis for us:
- Google Cloud: runs our servers and keeps our logs.
- Neon: hosts our database.
- Google Sign-In (Firebase): signs you in with Google, if you choose to.
- Firebase Cloud Messaging: delivers push notifications to your device.
- Google Maps and Google Places: show maps, and find a venue when you publish an event.
- Cloudflare: stores and delivers photos and event images, and serves this website.
- Hostinger: hosts our email, so it receives what you send to support@majlis.community.
Other users see what is public by design: scholar and organiser profiles, events, the hosts’ names, and public answers. A host sees the name, email and photo of people who book their event.
We may disclose data if the law requires it.
Our servers and database are in Singapore, so your data is stored outside India. Photos are stored and delivered by Cloudflare’s global network.
How long we keep it
We keep your data for as long as you have an account. When you delete your account, we delete your personal data, as described on our account deletion page.
Server request logs, which can include your IP address, are kept for about 30 days and then deleted automatically.
Our database provider keeps a short restore history so we can recover from failures. After you delete your account, your data can stay in that history for up to [backup retention], and then it is gone.
Your rights
You can:
- See and correct your details in the app, under Account.
- Delete your account and data, in the app or without the app.
- Withdraw consent, by deleting your account.
- Ask a question or complain, by writing to our grievance contact.
Grievance contact: support@majlis.community. We will reply within 30 days.
If you are not satisfied with our reply, you can complain to the Data Protection Board of India.
Children
Majlis is only for people aged 18 or older. We do not knowingly collect data from anyone under 18. If we learn that an account belongs to someone under 18, we will delete it. If you think a child is using Majlis, write to us at support@majlis.community.
Security
Data travels between the app and our servers over an encrypted connection. Passwords are stored only as hashes. Access to the database is restricted to the systems that run Majlis.
Changes to this policy
If we change this policy, we will update the date at the top. If a change is significant, we will tell you in the app.